Figurebox: removed height, width from allowed attributes on img